Tal como lo dice el titulo, han logrado ejecutar (por ahora) solo 4 líneas de código no firmado, a partir de un exploit en el save de Zelda, les dejo las imágenes
Here is a screen shot of an error in Zelda for the Nintendo Wii. So, what's so important about this particular error? Well, let's compare this to the GTA Exploit for the Sony PSP. Yes, that's right.
Bushing along with Segher have been able to modify a save game from Zelda to crash the machine and to run their own code on it. Note that you won't even need to "mod" your Nintendo Wii to run this exploit.
Yes, that's right - an exploit for the Nintendo Wii has been discovered and it allows you to run custom code. The method is pretty simple. Copy over a save file for Zelda, load it and the code runs. Don't get too excited yet. They have only been able to run 4 lines of code, but this is in a days work.
Segher was the one to find the exploit and Bushing has been testing it out with the aid of the USB Gecko. The process is far from simple as once you modify a save game it requires it be to signed with 3 keys. Here's some info from Bushing.
"Once the Wii decrypts the save game, it checks its signature. Every Wii has its own private key which is used to sign save games, and when you save a game, the Wii actually saves three bits of data:
* The encrypted save game
* The signature for the save game (using your console's private key)
* A copy of your console's public key, signed by Nintendo."
Of course, the end user wouldn't have to go through this process unless they were wanting to inject their own code into the save game, but that shouldn't be necessary because when I asked Bushing what his goal was he answered:
"Assuming we don't run into a wall, it should be able to lead to a homebrew loader. I hope. No promises.
"
para los que sepan inglés entenderán que dice que para hacer esto no es necesario ni siquiera tener la wii modificada, que es muy similar al exploit de GTA para el psp y que han logrado correr el código saltandose las 3 protecciones de nintendo que son:
los juegos encriptados
La firma para el save del juego (usando la clave privada de cada consola)
una copia de la clave publica de tu consola, firmada por nintendo
